.snyk

# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.25.0
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
  SNYK-PYTHON-WERKZEUG-6035177:
    - '*':
        reason: >-
          Upgrade path is complex, Issue tracked in github:
          https://github.com/GSA/data.gov/issues/4217
        expires: 2025-02-28T19:29:54.032Z
        created: 2023-11-01T13:35:17.972Z
  SNYK-PYTHON-BEAKER-575115:
    - '*':
        reason: >-
          No remediation available yet; Not affecting us since the storage is
          not accessible to any other client
        expires: 2025-02-28T19:29:54.032Z
        created: 2022-12-08T16:20:58.023Z
  SNYK-PYTHON-WERKZEUG-3319936:
    - '*':
        reason: >-
          Upgrade path is complex, Issue tracked in github:
          https://github.com/GSA/data.gov/issues/4217
        expires: 2025-02-28T19:29:54.032Z
        created: 2023-02-15T16:20:58.023Z
  SNYK-PYTHON-WERKZEUG-3319935:
    - '*':
        reason: >-
          Upgrade path is complex, Issue tracked in github:
          https://github.com/GSA/data.gov/issues/4217
        expires: 2025-02-28T16:20:58.017Z
        created: 2023-02-15T16:20:58.023Z
  SNYK-PYTHON-FLASK-5490129:
    - '*':
        reason: >-
          Upgrade path is complex, Issue tracked in github:
          https://github.com/GSA/data.gov/issues/4303
        expires: 2025-02-28T19:29:54.032Z
        created: 2023-05-08T16:20:58.023Z
  SNYK-PYTHON-PYOPENSSL-6149520:
    - '*':
        reason: >-
          No remediation available yet; Issue tracked in github:
          https://github.com/GSA/data.gov/issues/4532
        expires: 2025-02-28T19:29:54.032Z
        created: 2024-01-11T19:29:54.039Z
  SNYK-PYTHON-PYOPENSSL-6157250:
    - '*':
        reason: >-
          No remediation available yet; Issue tracked in github:
          https://github.com/GSA/data.gov/issues/4591
        expires: 2025-02-28T19:29:54.032Z
  SNYK-PYTHON-PYOPENSSL-6592766:
    - '*':
        reason: >-
          No remediation available yet; Low severity.
        expires: 2025-02-28T17:24:47.251Z
        created: 2024-04-24T17:24:47.257Z
  SNYK-PYTHON-WERKZEUG-6808933:
    - '*':
        reason: >-
           Not affecting us since no debugger is enabled in cloud.gov apps
        expires: 2025-02-28T19:29:54.032Z
  SNYK-PYTHON-WERKZEUG-8309091:
    - '*':
        reason: >-
           Not affecting us since it only affects Windows systems
        expires: 2025-01-28T16:20:58.017Z
  SNYK-PYTHON-WERKZEUG-8309092:
    - '*':
        reason: >-
           Issue created and triaged. GitHub issue:
           https://github.com/GSA/data.gov/issues/4951
        expires: 2025-01-28T16:20:58.017Z
patch: {}
# specify the directories or files to be excludeed from import:
exclude:
 global:
   - requirements-dev.txt